1 Star 6 Fork 0

eternalstone / EasyCaptchaBoot

加入 Gitee
与超过 1200万 开发者一起发现、参与优秀开源项目,私有仓库也完全免费 :)
免费加入
克隆/下载
贡献代码
同步代码
取消
提示: 由于 Git 不支持空文件夾,创建文件夹后会生成空的 .keep 文件
Loading...
README
Apache-2.0

EasyCaptchaBoot

MavenCentral Hex.pm

1.简介

 基于EasyCaptcha实现的Java图形验证码,支持gif、中文、算术等类型。解决了该项目存在的一些issues和问题,扩展了springboot-starter包,支持SpringBoot2.x和SpringBoot3.x,支持jdk8、jdk11、jdk17。


2.效果展示(与原项目效果一致)

验证码    验证码    验证码
验证码    验证码    验证码

算术类型:

验证码    验证码    验证码

中文类型:

验证码    验证码    验证码

内置字体:

验证码    验证码    验证码


3.版本说明

  • 2023-09-03

    • v2.0.0支持jdk1.8、jdk11, 支持SpringBoot2.x的版本

    • v3.0.0支持jdk17, 支持SpringBoot3.x的版本

    • 不再支持servlet项目的使用,servlet项目移步至 EasyCaptcha

    • captcha-core包剥离了servlet-api,不再与web层耦合,支持JavaSE的项目使用

    • 扩展了starter包,内置集成/captcha端点输出验证码,您无需再编写controller实现请求

    • 扩展了自定义配置背景颜色

    • 扩展了算术验证码算子长度

    • 使用单例解决了原项目存在的内存占用或内存溢出的问题,验证码数据不在绑定到captcha实例身上

  • 兼容性测试结果(2023-09-03)

    • 测试了jdk1.8, jdk11, jdk17环境下的使用情况,使用v2.0.0可支持jdk1.8,使用v3.0.0支持jdk17

    • 测试了springboot2.x和springboot3.x的使用情况,v2.0.0可支持springboot2.x,使用v3.0.0支持springboot3.x

    • 在springboot2.6.0以后的版本,需要开启配置 spring.mvc.pathmatch.matching-strategy=ant-path-matcher,否则会报错:java.lang.IllegalArgumentException: Expected lookupPath in request attribute "org.springframework.web.util.UrlPathHelper.PATH".

    • 在docker环境下,若基础镜像缺失部分字体,会导致内置字体在中文验证码、算术验证码中无法正常显示

    • 内置扩展的字体可能在中文验证码中无法正常显示,建议使用默认字体

    • 少部分内置字体在算数验证码中运算符号无法正常显示


4.使用方法

4.1.在SpringBoot中使用

4.1.1 导包

<!--SpringBoot2.x-->
<dependency>
    <groupId>io.github.eternalstone</groupId>
    <artifactId>captcha-spring-boot-starter</artifactId>
    <version>2.0.0</version>
</dependency>

<!--SpringBoot3.x-->
<dependency>
    <groupId>io.github.eternalstone</groupId>
    <artifactId>captcha-spring-boot-starter</artifactId>
    <version>3.0.0</version>
</dependency>

导入EasyCaptchaBoot的starer包后,Spring自动导入EasyCaptchaAutoConfiguration类,会自动导入一个/captcha的http端点,您可以直接在前端调用这个端点请求验证码,在springboot配置文件中也可以对验证码自定义

4.1.2 配置

springboot.yaml配置

easy-captcha:
  endpoint:
    #配置http端点,默认/captcha
    path: /captcha
    #是否启用端点生成
    enabled: true
  #验证码类性
  captcha: chinese
  #验证码位数
  length: 3
  #验证码宽度
  width: 130
  #验证码高度
  height: 48
  #验证码字符类性
  char-type: 2
  #验证码背景颜色
  background: "#000000"
  #验证码输出格式
  format: "png"
  #验证码字体,只能配置默认字体,默认字体见Captcha.Font_1等等
  font: 1

4.1.3 使用

  1. 使用默认导入的http端点,无需编写controller代码,直接在前端请求验证码即可

    <img src="/captcha" width="130px" height="48px" />

    不要忘了把/captcha路径排除登录拦截,比如shiro的拦截。

  2. 不使用默认导入,建议直接导入captcha-core包,而无需引入starter包,当然也可以配置easy-captcha.endpoint.enabled=false ,编写您自己的controller即可(可见SpringMVC的使用方式)

4.1.4 如何验证验证码

使用内置的http端点,默认存储的验证码的位置是HttpServletRequest.getSession,该方式只适用单机环境下的应用,如果您的应用是分布式环境,请见 4.6的说明。

@Controller
public class LoginController {
    
    //注入一个EasyCaptchaListener用于校验验证码
    @Resource
    private EasyCaptchaListener easyCaptchaListener;
    
    @PostMapping("/login")
    public String login(HttpServletRequest request,String verCode){
        boolean verify = easyCaptchaListener.verify(request, verCode);
        return verify? "success" :"fail";
    }   
}

4.2.在SpringMVC中使用

4.2.1 导入cpatcha-core包

<!--jdk1.8, jdk11-->
<dependency>
    <groupId>io.github.eternalstone</groupId>
    <artifactId>captcha-core</artifactId>
    <version>2.0.0</version>
</dependency>

<!--jdk17-->
<dependency>
    <groupId>io.github.eternalstone</groupId>
    <artifactId>captcha-core</artifactId>
    <version>3.0.0</version>
</dependency>

4.2.2 编写controller

@Controller
public class CaptchaController {
    
    @RequestMapping("/captcha")
    public void captcha(HttpServletRequest request, HttpServletResponse response) throws Exception {
        //通过验证码类型枚举获取一个验证码实例
        Captcha captcha = CaptchaFactory.getCaptcha(CaptchaEnum.SPEC);
        //使用实例创建一个随机码对象TextEntry
        TextEntry text = captcha.createText();
        //自定义验证码存储逻辑,单机一般存储session, 分布式下存储redis
        
        // 设置请求头为输出图片类型
        response.setContentType("image/gif");
        response.setHeader("Pragma", "No-cache");
        response.setHeader("Cache-Control", "no-cache");
        response.setDateHeader("Expires", 0);
        //将随机码通过实体写出成图片
        captcha.out(response.getOutputStream(), text);
    }
}

前端html代码:

<img src="/captcha" width="130px" height="48px" />

不要忘了把/captcha路径排除登录拦截,比如shiro的拦截。

4.3.设置宽高和位数

@Controller
public class CaptchaController {
    
    @RequestMapping("/captcha")
    public void captcha(HttpServletRequest request, HttpServletResponse response) throws Exception {
        Captcha captcha = CaptchaFactory.getCaptcha(CaptchaEnum.SPEC);
        // 设置宽、高、位数
        captcha.setWidth(130);
        captcha.setHeight(48);
       	//不建议直接从Captcha实例上设置字体,如果您需要设置字体,有如下情况
      	//1.SpringBoot中直接配置文件设置
        //2.SpingMVC中通过Bean一个Captcha实例进行设置,保证Captcha实例的单例,并且字体仅只设置1次
    }
}

4.5分布式环境下的验证码存储

分布式项目建议不要存储在session中,存储在redis中,redis存储需要一个key,key一同返回给前端用于验证输入,这个时候在SpringBoot中使用内置端点时,就需要自己实现redis存储验证码的逻辑了:

需要编写一个配置类实现EasyCaptchaListener接口,实现其中的一些关键方法即可

@Configuration
public class CaptchaListener implements EasyCaptchaListener {

    @Resource
    private RedisUtil redisUtil;

    @Override
    public void output(HttpServletResponse response, Captcha captcha, TextEntry entry) throws IOException {
        System.out.println("生成的验证码字符" + entry.charsText());
        System.out.println("生成的验证码答案" + entry.getKey());

        String key = UUID.randomUUID().toString();
        CaptchaVO captchaVO = new CaptchaVO();
        captchaVO.setUuid(key);
        captchaVO.setImage(captcha.toBase64(entry));

        redisUtil.setEx(key, entry.getKey(), 30, TimeUnit.MINUTES);
        response.setHeader("content-type", "text/html;charset=UTF-8");
        ServletOutputStream outputStream = response.getOutputStream();
        outputStream.write(JSONObject.toJSONString(captchaVO).getBytes());
        outputStream.flush();
    }

    @Override
    public boolean verify(HttpServletRequest request, String code) {
        String key = request.getParameter("key");
        System.out.println("前端传入的key" + key);
        System.out.println("前端输入的验证码" + code);
        String redisCode = redisUtil.get(key);
        // 判断验证码
        return redisCode != null && redisCode.equals(code);
    }
    
    //也可以重载verify方法,自定义传入参数进行验证, 例如:
    public boolean verify(String uuid, String code) {
      System.out.println("前端传入的uuid" + uuid);
      System.out.println("前端输入的验证码" + code);
      String redisCode = redisUtil.get(uuid);
      // 判断验证码
      return redisCode != null && redisCode.equals(code);
    }
    
}

在controller中验证,同4.1.4

@Controller
public class LoginController {
    
    //注入一个EasyCaptchaListener用于校验验证码
    @Resource
    private EasyCaptchaListener easyCaptchaListener;
    
    @PostMapping("/login")
    public String login(HttpServletRequest request,String key, String verCode){
        boolean verify = easyCaptchaListener.verify(request, verCode);
        return verify? "success" :"fail";
    }   
}

前端使用ajax获取验证码:

<img id="verImg" width="130px" height="48px"/>

<script>
    var verKey;
    // 获取验证码
    $.get('/captcha', function(res) {
        verKey = res.key;
        $('#verImg').attr('src', res.image);
    },'json');
    
    // 登录
    $.post('/login', {
        key: verKey,
        verCode: '8u6h',
        username: 'admin'
        password: 'admin'
    }, function(res) {
        console.log(res);
    }, 'json');
</script>

5.更多设置

5.1.验证码类型

Captcha类型枚举包含几种类型如下:

枚举 类型
CaptchaEnum.SPEC 普通字符验证码
CaptchaEnum.GIF GIF动图验证码
CaptchaEnum.CHINESE 中文验证码
CaptchaEnum.CHINESE_GIF 中文GIF动图验证码
CaptchaEnum.ARITHMETIC 算术验证码
public class Test {
    
    public static void main(String[] args) {
        //创建一个验证码配置类
        CaptchaProperty property = new CaptchaProperty();
        //配置验证码类性枚举
        property.setCaptcha(CaptchaEnum.SPEC);
        //配置验证码宽度
        property.setWidth(130);
        //配置验证码高度
        property.setHeight(48);
        //配置验证码几个字符
        property.setLength(4);
        //配置内置字体
        property.setFont(Captcha.FONT_2);
        //配置验证码字符类性
        property.setCharType(Captcha.TYPE_DEFAULT);
        //配置验证码背景颜色
        property.setBackground(Color.BLACK);
        //创建验证码实例
        Captcha captcha = CaptchaFactory.getCaptcha(property);
        //获取验证码内容
        TextEntry text = captcha.createText();
        //获取随机验证码内容
        String text = entry.charsText();
        //获取随机验证码校验值
        String key = entry.getKey();
    }
}

注意:
 算术验证码的len表示是几位数运算,而其他验证码的len表示验证码的位数,算术验证码的TextEntry.charsText()表示的是公式字符,TextEntry.getKey()表示的是公式运算结果。 对于算术验证码,你应该把公式的结果存储session,而不是公式。

5.2.验证码字符类型

类型 描述
TYPE_DEFAULT 数字和字母混合
TYPE_ONLY_NUMBER 纯数字
TYPE_ONLY_CHAR 纯字母
TYPE_ONLY_UPPER 纯大写字母
TYPE_ONLY_LOWER 纯小写字母
TYPE_NUM_AND_UPPER 数字和大写字母

只有SpecCaptchaGifCaptcha设置才有效果。

5.3.字体设置

内置字体:

字体 效果
Captcha.FONT_1
Captcha.FONT_2
Captcha.FONT_3
Captcha.FONT_4
Captcha.FONT_5
Captcha.FONT_6
Captcha.FONT_7
Captcha.FONT_8
Captcha.FONT_9
Captcha.FONT_10

使用方法:

CaptchaProperty property = new CaptchaProperty();
//配置验证码类性枚举
property.setCaptcha(CaptchaEnum.SPEC);

// 设置内置字体
property.setFont(Captcha.FONT_1); 

// 设置系统字体
property.setFont(new Font("楷体", Font.PLAIN, 28));

//创建验证码实例对象
Captcha captcha = CaptchaFactory.getCaptcha(property);

5.4.输出base64编码

Captcha captcha = CaptchaFactory.getCaptcha(property);
TextEntry entry = captcha.createText();
String base64 = captcha.toBase64(entry);

5.5.输出到文件

FileOutputStream outputStream = new FileOutputStream(new File("C:/captcha.png"))
Captcha captcha = CaptchaFactory.getCaptcha(property);
TextEntry entry = captcha.createText();
captcha.out(outputStream);

6.自定义效果

 继承Captcha实现outcreateText方等方法,中文验证码可继承ChineseCaptchaAbstract,算术验证码可继承ArithmeticCaptchaAbstract


7.开发分支说明

  • master为2.x.x版本的发行主分支,支持SpringBoot2.x的版本
  • v3为3.x.x版本的发行主分支, 支持SpringBoot3.x的版本
  • 欢迎大家提交issues和push

Apache License Version 2.0, January 2004 http://www.apache.org/licenses/ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION 1. Definitions. "License" shall mean the terms and conditions for use, reproduction, and distribution as defined by Sections 1 through 9 of this document. "Licensor" shall mean the copyright owner or entity authorized by the copyright owner that is granting the License. "Legal Entity" shall mean the union of the acting entity and all other entities that control, are controlled by, or are under common control with that entity. For the purposes of this definition, "control" means (i) the power, direct or indirect, to cause the direction or management of such entity, whether by contract or otherwise, or (ii) ownership of fifty percent (50%) or more of the outstanding shares, or (iii) beneficial ownership of such entity. "You" (or "Your") shall mean an individual or Legal Entity exercising permissions granted by this License. "Source" form shall mean the preferred form for making modifications, including but not limited to software source code, documentation source, and configuration files. "Object" form shall mean any form resulting from mechanical transformation or translation of a Source form, including but not limited to compiled object code, generated documentation, and conversions to other media types. "Work" shall mean the work of authorship, whether in Source or Object form, made available under the License, as indicated by a copyright notice that is included in or attached to the work (an example is provided in the Appendix below). "Derivative Works" shall mean any work, whether in Source or Object form, that is based on (or derived from) the Work and for which the editorial revisions, annotations, elaborations, or other modifications represent, as a whole, an original work of authorship. For the purposes of this License, Derivative Works shall not include works that remain separable from, or merely link (or bind by name) to the interfaces of, the Work and Derivative Works thereof. "Contribution" shall mean any work of authorship, including the original version of the Work and any modifications or additions to that Work or Derivative Works thereof, that is intentionally submitted to Licensor for inclusion in the Work by the copyright owner or by an individual or Legal Entity authorized to submit on behalf of the copyright owner. For the purposes of this definition, "submitted" means any form of electronic, verbal, or written communication sent to the Licensor or its representatives, including but not limited to communication on electronic mailing lists, source code control systems, and issue tracking systems that are managed by, or on behalf of, the Licensor for the purpose of discussing and improving the Work, but excluding communication that is conspicuously marked or otherwise designated in writing by the copyright owner as "Not a Contribution." "Contributor" shall mean Licensor and any individual or Legal Entity on behalf of whom a Contribution has been received by Licensor and subsequently incorporated within the Work. 2. Grant of Copyright License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare Derivative Works of, publicly display, publicly perform, sublicense, and distribute the Work and such Derivative Works in Source or Object form. 3. Grant of Patent License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable (except as stated in this section) patent license to make, have made, use, offer to sell, sell, import, and otherwise transfer the Work, where such license applies only to those patent claims licensable by such Contributor that are necessarily infringed by their Contribution(s) alone or by combination of their Contribution(s) with the Work to which such Contribution(s) was submitted. If You institute patent litigation against any entity (including a cross-claim or counterclaim in a lawsuit) alleging that the Work or a Contribution incorporated within the Work constitutes direct or contributory patent infringement, then any patent licenses granted to You under this License for that Work shall terminate as of the date such litigation is filed. 4. Redistribution. You may reproduce and distribute copies of the Work or Derivative Works thereof in any medium, with or without modifications, and in Source or Object form, provided that You meet the following conditions: (a) You must give any other recipients of the Work or Derivative Works a copy of this License; and (b) You must cause any modified files to carry prominent notices stating that You changed the files; and (c) You must retain, in the Source form of any Derivative Works that You distribute, all copyright, patent, trademark, and attribution notices from the Source form of the Work, excluding those notices that do not pertain to any part of the Derivative Works; and (d) If the Work includes a "NOTICE" text file as part of its distribution, then any Derivative Works that You distribute must include a readable copy of the attribution notices contained within such NOTICE file, excluding those notices that do not pertain to any part of the Derivative Works, in at least one of the following places: within a NOTICE text file distributed as part of the Derivative Works; within the Source form or documentation, if provided along with the Derivative Works; or, within a display generated by the Derivative Works, if and wherever such third-party notices normally appear. The contents of the NOTICE file are for informational purposes only and do not modify the License. You may add Your own attribution notices within Derivative Works that You distribute, alongside or as an addendum to the NOTICE text from the Work, provided that such additional attribution notices cannot be construed as modifying the License. You may add Your own copyright statement to Your modifications and may provide additional or different license terms and conditions for use, reproduction, or distribution of Your modifications, or for any such Derivative Works as a whole, provided Your use, reproduction, and distribution of the Work otherwise complies with the conditions stated in this License. 5. Submission of Contributions. Unless You explicitly state otherwise, any Contribution intentionally submitted for inclusion in the Work by You to the Licensor shall be under the terms and conditions of this License, without any additional terms or conditions. Notwithstanding the above, nothing herein shall supersede or modify the terms of any separate license agreement you may have executed with Licensor regarding such Contributions. 6. Trademarks. This License does not grant permission to use the trade names, trademarks, service marks, or product names of the Licensor, except as required for reasonable and customary use in describing the origin of the Work and reproducing the content of the NOTICE file. 7. Disclaimer of Warranty. Unless required by applicable law or agreed to in writing, Licensor provides the Work (and each Contributor provides its Contributions) on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. You are solely responsible for determining the appropriateness of using or redistributing the Work and assume any risks associated with Your exercise of permissions under this License. 8. Limitation of Liability. In no event and under no legal theory, whether in tort (including negligence), contract, or otherwise, unless required by applicable law (such as deliberate and grossly negligent acts) or agreed to in writing, shall any Contributor be liable to You for damages, including any direct, indirect, special, incidental, or consequential damages of any character arising as a result of this License or out of the use or inability to use the Work (including but not limited to damages for loss of goodwill, work stoppage, computer failure or malfunction, or any and all other commercial damages or losses), even if such Contributor has been advised of the possibility of such damages. 9. Accepting Warranty or Additional Liability. While redistributing the Work or Derivative Works thereof, You may choose to offer, and charge a fee for, acceptance of support, warranty, indemnity, or other liability obligations and/or rights consistent with this License. However, in accepting such obligations, You may act only on Your own behalf and on Your sole responsibility, not on behalf of any other Contributor, and only if You agree to indemnify, defend, and hold each Contributor harmless for any liability incurred by, or claims asserted against, such Contributor by reason of your accepting any such warranty or additional liability. END OF TERMS AND CONDITIONS APPENDIX: How to apply the Apache License to your work. To apply the Apache License to your work, attach the following boilerplate notice, with the fields enclosed by brackets "[]" replaced with your own identifying information. (Don't include the brackets!) The text should be enclosed in the appropriate comment syntax for the file format. We also recommend that a file or class name and description of purpose be included on the same "printed page" as the copyright notice for easier identification within third-party archives. Copyright EasyCaptchaBoot eternalstone Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

简介

基于EasyCaptcha实现的Java图形验证码,支持gif、中文、算术等类型。解决了该项目存在的一些issues和问题,扩展了springboot-starter包,支持SpringBoot2.x和SpringBoot3.x,支持jdk8、jdk11、jdk17。 展开 收起
Java
Apache-2.0
取消

发行版

暂无发行版

贡献者

全部

近期动态

加载更多
不能加载更多了
1
https://gitee.com/eternalstone/EasyCaptchaBoot.git
git@gitee.com:eternalstone/EasyCaptchaBoot.git
eternalstone
EasyCaptchaBoot
EasyCaptchaBoot
master

搜索帮助

53164aa7 5694891 3bd8fe86 5694891